PDA

View Full Version : microsoft.securitycenter_disabled (except...I don't have security center??? O__O)



ChiruPon
2010-01-20, 22:49
I contracted Vundo and Rogue trojans recently, which prevented me from using the computer in normal mode. (A blue "file dump" screen would come up as soon as I'd put in my password and press "enter"). Even in safe mode, a bunch of porno pop ups would come up and all the sites I went to would redirect. I managed to fix it using S&D and Malwarebytes, but now S&D is saying that there's this "microsoft.securitycenter_disabled" thing on my computer- which I've fixed almost everytime I use S&D, but it magically comes up again.

So I went into services to find it and take care of it (I looked through similar posts on the forum), except it's not there. Not only that, when I go to the Control Panel, there is no Security Center, but just something called "Security" (I thought they were the same thing at first, but I am pretty sure now that they are not).

http://img697.imageshack.us/img697/7535/63270504.png

drragostea
2010-01-21, 00:54
By this detection, Spybot is telling you that your Security Center (place where it shows your firewall, automatic update, and anti-virus protection) is disabled. So your machine will not tell you anything if your firewall should be silently disabled. Not a good sign.

I would suggest you visit this post. I just made it recently, another member has a sticky situation like yours.
http://forums.spybot.info/showpost.php?p=356478&postcount=2
-

ChiruPon
2010-01-21, 01:35
It appears that you have a rogue AV infection. Usually this type of malware will prompt you with a fake Windows bubble and tell you your machine is infected and go buy their software. Not a good sign.

For the time being, I would suggest you start your own thread in the Malware Removal Forums with a HJT log and wait for a helper. I am saying this because this looks like a bad infection. Please read the post below (just follow the links):
http://forums.spybot.info/showpost.php?p=356308&postcount=2
-
But nothing prompted me to download their software. O__O And both Malwarebytes and McAfee haven't detected anything. I just can't figure out why I can't find Security Center in my services and why S&D keeps finding the same thing (microsoft.securitycenter_disabled).

ChiruPon
2010-01-21, 01:55
Oh yeah. I never noticed this until now, but it kind of bothers me:
http://img194.imageshack.us/img194/862/79997796.png
I cleared the viruses with MBAM and S&D, so the porno pop-ups don't come up any more, but it seems the stuff is still there?? Is there a way to get rid of it?

drragostea
2010-01-21, 04:24
I have never mentioned you have rogue AV software on your machine, merely another situation where the machine appears to be infected.

The whole reason I thought you might want to consider visiting the Malware Removal Forums is because you mentioned you had Vundo and rogue malware problems lately.

If you are running Windows Vista or Windows 7, (not an official explanation) this "Security Center" (they have it in Windows XP) service is integrated into the Control Panel or where you find the System Maintenance settings. In Windows 7 it is in the Action Center.

It is already good news that Spybot-Search&Destroy and MBAM have came back clean with scans and the pop ups are not returning. It appears that Spybot has removed it successfully.

Your screenshot (my guess) is McAfee scanning the registry... scanning the portion of the registry where bad/blocked/blacklisted domains reside. Do you recall Spybot's Immunization (or another form of using the HOSTS file to avoid accidentally stepping onto a malicious domain)? Well, that is what you are seeing. These X rated sites are placed in your HOSTS file, thus if you attempt to visit them your web browser will automatically tell that the domain cannot be reached.

ChiruPon
2010-01-21, 21:40
Your screenshot (my guess) is McAfee scanning the registry... scanning the portion of the registry where bad/blocked/blacklisted domains reside. Do you recall Spybot's Immunization (or another form of using the HOSTS file to avoid accidentally stepping onto a malicious domain)? Well, that is what you are seeing. These X rated sites are placed in your HOSTS file, thus if you attempt to visit them your web browser will automatically tell that the domain cannot be reached.
Oh okay. I thought it was something bad. xD
So that means there's nothing wrong with my computer right?
Thanks for the help then. =D

drragostea
2010-01-23, 01:50
You are welcome. :cowboy: